PT-2026-56694 · Tumf · Mcp-Text-Editor

Geochen · Publicado 2026-07-09 · Atualizado 2026-07-09 · CVE-2026-15138

NVD

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

A security vulnerability has been detected in tumf mcp-text-editor up to 1.0.2. This issue affects the function validate file path of the file mcp text editor/text editor.py. Such manipulation of the argument file path leads to path traversal. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor closed the GitHub issue for this vulnerability without any explanation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-15138

Produtos afetados

Mcp-Text-Editor

Referências · 7

• 🔥 https://github.com/tumf/mcp-text-editor/issues/22 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15138 · Nota de Segurança
• https://vuldb.com/vuln/376953/cti · Nota
• https://github.com/tumf/mcp-text-editor · Nota
• https://vuldb.com/submit/851188 · Nota
• https://vuldb.com/cve/CVE-2026-15138 · Nota
• https://vuldb.com/vuln/376953 · Nota